Microsoft DeveloperTools: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 11

• Critical 9.6
  CVE-2026-47281

  Visual Studio Code Elevation of Privilege Vulnerability

  Missing authorization in Visual Studio Code allows an unauthorized attacker to elevate privileges over a network.

  Microsoft Visual Studio Code
  Jun 9, 2026
• High 8.4
  CVE-2026-45482

  Microsoft Visual Studio Code CoPilot Chat Security Feature Bypass Vulnerability

  Improper limitation of a pathname to a restricted directory ('path traversal') in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

  Microsoft Microsoft Visual Studio Code CoPilot Chat Extension
  Jun 9, 2026
• High 8.0
  CVE-2026-45644

  Microsoft Live Share Canvas SDK Elevation of Privilege Vulnerability

  Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Live Share Canvas SDK allows an authorized attacker to elevate privileges over a network.

  Microsoft Microsoft Live Share Canvas SDK
  Jun 9, 2026
• High 7.8
  CVE-2026-45490

  .NET SDK Elevation of Privilege Vulnerability

  Improper authorization in .NET allows an authorized attacker to elevate privileges locally.

  Microsoft .NET 9.0 runtime .NET 8.0 runtime .NET 10.0 runtime Ubuntu Alpine
  Jun 9, 2026
• High 7.8
  CVE-2026-47292

  Visual Studio Code MSSQL Extension Remote Code Execution Vulnerability

  Inclusion of functionality from untrusted control sphere in Visual Studio Code allows an unauthorized attacker to elevate privileges locally.

  Microsoft Visual Studio Code - MSSQL Extension
  Jun 9, 2026
• High 7.5
  CVE-2026-40376

  Visual Studio Code Elevation of Privilege Vulnerability

  Improper input validation in Visual Studio Code allows an unauthorized attacker to elevate privileges over a network.

  Microsoft Visual Studio Code
  Jun 9, 2026
• High 7.5
  CVE-2026-45591

  ASP.NET Core Denial of Service Vulnerability

  Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to deny service over a network.

  Microsoft .NET 9.0 runtime .NET 10.0 runtime .NET 8.0 runtime Ubuntu Alpine Wolfi NuGet
  Jun 9, 2026
• High 7.1
  CVE-2026-48569

  Visual Studio Code Security Feature Bypass Vulnerability

  Improper input validation in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

  Microsoft Visual Studio Code
  Jun 9, 2026
• Medium 6.5
  CVE-2026-47284

  Visual Studio Code Information Disclosure Vulnerability

  Exposure of sensitive information to an unauthorized actor in Visual Studio Code allows an unauthorized attacker to disclose information over a network.

  Microsoft Visual Studio Code
  Jun 9, 2026
• Medium 6.5
  CVE-2026-47287

  Visual Studio Code Tampering Vulnerability

  Relative path traversal in Visual Studio Code allows an unauthorized attacker to perform tampering over a network.

  Microsoft Visual Studio Code
  Jun 9, 2026
• Medium 6.2
  CVE-2026-45491

  .NET Tampering Vulnerability

  Improper link resolution before file access ('link following') in .NET allows an unauthorized attacker to perform tampering locally.

  Microsoft .NET 9.0 runtime .NET 10.0 runtime .NET 8.0 runtime Ubuntu Alpine Wolfi NuGet
  Jun 9, 2026

Revision history

1. 2026-07-16 #9

   Neue Updates von Oracle Linux aufgenommen

2. 2026-06-24 #8

   Neue Updates von Oracle Linux aufgenommen

3. 2026-06-22 #7

   Neue Updates von Red Hat aufgenommen

4. 2026-06-21 #6

   Neue Updates von Fedora aufgenommen

5. 2026-06-17 #5

   Neue Updates von Red Hat aufgenommen

6. 2026-06-14 #4

   Neue Updates von Rocky Enterprise Software Foundation aufgenommen

7. 2026-06-11 #3

   Neue Updates von Red Hat, Rocky Enterprise Software Foundation, Oracle Linux und Ubuntu aufgenommen

8. 2026-06-10 #2

   Neue Updates von Red Hat aufgenommen

9. 2026-06-09 #1

   Initiale Fassung

References

• Microsoft Leitfaden für Sicherheitsupdates
  https://msrc.microsoft.com/update-guide/
• Red Hat Security Advisory RHSA-2026:25110 vom 2026-06-10
  https://access.redhat.com/errata/RHSA-2026:25110
• Red Hat Security Advisory RHSA-2026:25111 vom 2026-06-10
  https://access.redhat.com/errata/RHSA-2026:25111
• Red Hat Security Advisory RHSA-2026:25112 vom 2026-06-11
  https://access.redhat.com/errata/RHSA-2026:25112
• Red Hat Security Advisory RHSA-2026:25113 vom 2026-06-10
  https://access.redhat.com/errata/RHSA-2026:25113
• Red Hat Security Advisory RHSA-2026:25114 vom 2026-06-11
  https://access.redhat.com/errata/RHSA-2026:25114
• Red Hat Security Advisory RHSA-2026:25115 vom 2026-06-11
  https://access.redhat.com/errata/RHSA-2026:25115
• Red Hat Security Advisory RHSA-2026:25222 vom 2026-06-11
  https://access.redhat.com/errata/RHSA-2026:25222
• Rocky Linux Security Advisory RLSA-2026:25114 vom 2026-06-12
  https://errata.build.resf.org/RLSA-2026:25114
• Rocky Linux Security Advisory RLSA-2026:25113 vom 2026-06-12
  https://errata.build.resf.org/RLSA-2026:25113
• Rocky Linux Security Advisory RLSA-2026:25110 vom 2026-06-12
  https://errata.build.resf.org/RLSA-2026:25110
• Oracle Linux Security Advisory ELSA-2026-25113 vom 2026-06-11
  https://linux.oracle.com/errata/ELSA-2026-25113.html
• Oracle Linux Security Advisory ELSA-2026-25110 vom 2026-06-11
  https://linux.oracle.com/errata/ELSA-2026-25110.html
• Oracle Linux Security Advisory ELSA-2026-25114 vom 2026-06-12
  https://linux.oracle.com/errata/ELSA-2026-25114.html
• Ubuntu Security Notice USN-8420-1 vom 2026-06-11
  https://ubuntu.com/security/notices/USN-8420-1
• Red Hat Security Advisory RHSA-2026:25220 vom 2026-06-11
  https://access.redhat.com/errata/RHSA-2026:25220
• Red Hat Security Advisory RHSA-2026:25221 vom 2026-06-11
  https://access.redhat.com/errata/RHSA-2026:25221
• Rocky Linux Security Advisory RLSA-2026:25111 vom 2026-06-13
  https://errata.build.resf.org/RLSA-2026:25111
• Rocky Linux Security Advisory RLSA-2026:25112 vom 2026-06-13
  https://errata.build.resf.org/RLSA-2026:25112
• Rocky Linux Security Advisory RLSA-2026:25222 vom 2026-06-13
  https://errata.build.resf.org/RLSA-2026:25222
• Rocky Linux Security Advisory RLSA-2026:25220 vom 2026-06-13
  https://errata.build.resf.org/RLSA-2026:25220
• Rocky Linux Security Advisory RLSA-2026:25115 vom 2026-06-13
  https://errata.build.resf.org/RLSA-2026:25115
• Rocky Linux Security Advisory RLSA-2026:25221 vom 2026-06-13
  https://errata.build.resf.org/RLSA-2026:25221
• Red Hat Security Advisory RHSA-2026:26638 vom 2026-06-17
  https://access.redhat.com/errata/RHSA-2026:26638
• Red Hat Security Advisory RHSA-2026:26994 vom 2026-06-18
  https://access.redhat.com/errata/RHSA-2026:26994
• Fedora Security Advisory FEDORA-2026-DEC081126F vom 2026-06-19
  https://bodhi.fedoraproject.org/updates/FEDORA-2026-dec081126f
• Fedora Security Advisory FEDORA-2026-2F80369C73 vom 2026-06-19
  https://bodhi.fedoraproject.org/updates/FEDORA-2026-2f80369c73
• Fedora Security Advisory FEDORA-2026-0DCE096C13 vom 2026-06-19
  https://bodhi.fedoraproject.org/updates/FEDORA-2026-0dce096c13
• Fedora Security Advisory FEDORA-2026-041785A779 vom 2026-06-19
  https://bodhi.fedoraproject.org/updates/FEDORA-2026-041785a779
• Fedora Security Advisory FEDORA-2026-2954CD11BD vom 2026-06-19
  https://bodhi.fedoraproject.org/updates/FEDORA-2026-2954cd11bd
• Fedora Security Advisory FEDORA-2026-A424C1061E vom 2026-06-19
  https://bodhi.fedoraproject.org/updates/FEDORA-2026-a424c1061e
• Red Hat Security Advisory RHSA-2026:28007 vom 2026-06-22
  https://access.redhat.com/errata/RHSA-2026:28007
• Red Hat Security Advisory RHSA-2026:28051 vom 2026-06-23
  https://access.redhat.com/errata/RHSA-2026:28051
• Red Hat Security Advisory RHSA-2026:28011 vom 2026-06-22
  https://access.redhat.com/errata/RHSA-2026:28011
• Red Hat Security Advisory RHSA-2026:28009 vom 2026-06-22
  https://access.redhat.com/errata/RHSA-2026:28009
• Oracle Linux Security Advisory ELSA-2026-25222 vom 2026-06-25
  https://linux.oracle.com/errata/ELSA-2026-25222.html
• Oracle Linux Security Advisory ELSA-2026-25220 vom 2026-06-25
  https://linux.oracle.com/errata/ELSA-2026-25220.html
• Oracle Linux Security Advisory ELSA-2026-25221 vom 2026-06-25
  https://linux.oracle.com/errata/ELSA-2026-25221.html
• Oracle Linux Security Advisory ELSA-2026-25111 vom 2026-07-17
  https://linux.oracle.com/errata/ELSA-2026-25111.html
• Oracle Linux Security Advisory ELSA-2026-25115 vom 2026-07-17
  https://linux.oracle.com/errata/ELSA-2026-25115.html
• Oracle Linux Security Advisory ELSA-2026-25112 vom 2026-07-17
  https://linux.oracle.com/errata/ELSA-2026-25112.html